Please allow Content-Type and Accept headers in CORS requests

[prayerslayer]

E.g. in Node I do it like this:

res.header('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept, Authorization');

[sarnowski]

implemented in friboo